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Top Stories 

• Researchers identified a new banking trojan botnet known as Qbot or Qakbot that has 
infected 500,000 systems and stolen data from users including 800,000 online banking 
transactions. - The Register (See item 5) 

• A fire at the Grove Field Airport in Camas, Washington, caused more than $1 million in 
damage to 10-12 small aircrafts and burned 12-14 hangars October 6. - KOIN 6 Portland 
(See item 7) 

• Stores and restaurants at a Hillsdale, New Jersey strip mall were closed indefinitely and 
officials marked the building as an unsafe structure October 6 after a dump truck crashed 
through pavement and into an underground garage beneath the strip mall October 3. - 
Bergen County Record (See item 32 ) 

• Utility crews restored service to all businesses and homes in Waco, Texas, October 5 
following strong storms October 1 that knocked out power and damaged several apartment 
and commercial buildings. - KWTX 10 Waco (See item 34 ) 
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Energy Sector 



1. October 6, KOCO 5 Oklahoma City - (Oklahoma) Four injured in tanker explosion 
at Horizon Energy. An oil tanker explosion at Horizon Energy in Stillwater sent four 
Best Well Services employees to area hospitals with injuries while they were working 
on the oil tanker October 6. The company is investigating the cause of the explosion 
that left significant damage to the building. 

Source: http://www.koco.com/news/crews-at-scene-of-tanker-explosion-near- 
stillwater/28968504 

T Return to top i 

Chemical Industry Sector 

2. October 6, Attleboro Sun Chronicle - (Rhode Island) Attleboro chemical company 
ordered to pay federal Clean Air Act fine. A federal judge October 6 imposed a 
$200,000 fine and 5 years’ probation on Roberts Chemical Co., for failing to develop 
and implement a risk management plan to minimize the chance of releasing ethyl ether 
at the company’s Pawtucket facility, a violation of the Clean Air Act. Roberts Chemical 
pleaded guilty in August to charges filed by the U.S. Environmental Protection Agency 
following an inspection of the facility that revealed the company failed to implement a 
plan in November and December 2008 while storing 27,467 pounds of the chemical. 
Source: http://www.thesunchronicle.com/attleboro/attleboro-chernical-company- 
ordered-to-pav-federal-clean-air-act/article 7905 1 5 la-4d97- 1 Ie4-a28a- 
17531eaa27e4.html 



For another story, see item 14 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. October 6, Auto World News - (National) Chrysler recall: 31,000 vans called back in 
U.S. Chrysler announced a recall for around 31,497 model year 2014 Ram ProMaster 
vehicles in the U.S. due to head restraints that could exceed the permitted gap between 
an occupant’s head and the restraint, increasing the risk of injury in an accident. 

Source: http://www.autoworldnews.com/articles/9359/20141006/chrvsler-recall-31- 
OOQ-vans-called-back-in-u-s.htm 

4. October 6, Detroit News - (National) U.S. opens steering probe into 938,000 Ford 
cars. The National Highway Traffic Safety Administration announced October 6 that it 
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is opening an investigation into 938,000 model year 2010-2012 Ford Fusion, Lincoln 
MKZ, and Mercury Milan vehicles after reviewing over 500 complaints of a loss of 
electric power steering assist and 4 reported crashes. 

Source: http://www.detroitnews.com/storv/business/autos/ford/2014/10/06/us-opens- 
steering-probe-ford-cars/ 16797815/ 



[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. October 7, The Register - (International) Monster banking trojan botnet claims 
500,000 victims. Researchers with Proofpoint identified a new banking trojan botnet 
known as Qbot or Qakbot that has infected 500,000 systems and stolen data from users 
including 800,000 online banking transactions, with 59 percent of the stolen sessions 
taken from accounts in major U.S. banks. The researchers found that the malware for 
the botnet was launched from compromised WordPress sites using drive-by download 
attacks. 

Source: 

http://www.theregister.co.uk/2014/10/07/monster banking trojan botnet claims 5000 
00 victims/ 

6. October 7, NJ.com - (New Jersey; Florida) Defendants from Essex, Ocean counties 
convicted in $15M mortgage fraud scheme. Two siblings in New Jersey were found 
guilty October 6 for their roles in a $15 million mortgage fraud scheme that inflated the 
sales prices of distressed condos in Naples, Florida, and several locations in New Jersey 
and used straw buyers to defraud lending institutions. One of the siblings assisted the 
scheme while working as a title agent at Tri- State Title Agency while the other served 
as a straw buyer. 

Source: 

http://www.ni.com/essex/index.ssf/2014/10/brother sister from essex county convict 
ed for roles in 15m mortgage fraud scam.html 
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Transportation Systems Sector 

7. October 7, KOIN 6 Portland - (Washington) Grove Field Airport fire: Airplanes 
destroyed. A fire at the Grove Field Airport in Camas, Washington, caused more than 
$1 million in damage to 10-12 small aircrafts and burned 12-14 hangars October 6. The 
cause of the fire is under investigation and the airport remained closed October 7. 
Source: http://koin.com/2014/10/06/2nd-alarm-fire-breaks-out-at-grove-field-airport/ 



-3 - 



8. October 6, Chicago Tribune - (National) Delays at O’Hare, Midway after 
Indianapolis FAA outage. Over 277 flights were delayed at Chicago’s O’Hare 
International Airport and Midway Airport October 6 due to a telephone outage at an 
Indianapolis air-traffic control facility. More than 100 flights at O’Hare International 
Airport were also cancelled due to the outage. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-delays-at-ohare- 
midwav-after-indianapolis-faa-outage-20141006-story.html 

9. October 6, KPRC 2 Houston - (Texas) Highway cameras repaired after likely 
attempted copper theft on North Freeway. Approximately 43 Transfer cameras were 
repaired and 2,000 feet of new fiber optic cable was installed October 6 on the North 
Freeway near FM 1960 in Houston after an individual cut fiber optic cables at one 
camera site in a copper theft attempt, knocking the cameras offline. 

Source: http://www.click2houston.com/news/highwav-cameras-repaired-after-likely- 
attempted-copper- theft-on-north-freeway/2898 1150 

10. October 6, Associated Press - (Kentucky) Fire, explosions destroy R.J. Corman 
Railroad building. An October 6 fire destroyed the R.J. Corman Railroad building 
near the Kentucky-Tennessee State hne in Guthrie and forced the temporary evacuation 
of about six homes October 6. Officials believed barrels of paint may have caused the 
several small explosions. 

Source: http://www.kentuckv.com/2014/10/06/3466097/fire-explosions-destroy- 
railroad.html 



11. October 6, Ventura County Star - (California) Man killed in Highway 101 crash 
after surviving another crash. One person was killed and 2 others injured when a van 
crashed into their overturned vehicle, hitting them after the driver lost control of the 
SUV and overturned blocking lanes on Highway 101 in Ventura October 6. Two 
northbound lanes were closed for more than 7 hours as authorities investigated and 
cleared the scene. 

Source: http://www.vcstar.com/news/local-news/traffic/lanes-closed-on-highwav-101- 
near-ventura-3-taken-to-hospital-after-crash 

12. October 6, KOKI 23 Tulsa - (Oklahoma) Road closed due to chemical spill back 
open. A chemical spill shut down the intersection of State Highway 266 and North 
193rd East Avenue in Rogers County for nearly 3 hours October 6 when a semi-truck 
hauling barrels of bleach lost 8 barrels onto the roadway, causing 2 barrels to rupture 
and spill their contents. 

Source: http://www.fox23.com/news/news/local/ohp-closes-road-possible-hazmat- 
leak/nhcxD/ 
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Food and Agriculture Sector 

13. October 7, WMBF 32 Myrtle Beach - (South Carolina) Fire destroys tobacco barns in 
the Pee Dee. Three bams filled with tobacco on a Florence County farm were 
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destroyed by fire October 6. Authorities suspect a burner used to cure the tobacco may 
have malfunctioned and overheated, sparking the blaze. 

Source: http://www.carolinalive.com/news/story.aspx?id=l 106383 

14. October 6, U.S. Environmental Protection Agency - (Florida) Two Tampa 
corporations and four Tampa residents plead guilty to scheme to unlawfully sell 
an unregistered pesticide and obstruct justice. New Nautical Coatings, Inc., d/b/a 
Sea Hawk Paints, and Sea Hawk Refinish Line, Inc., d/b/a Refinish Line Auto 
Supplies, along with four of their officers pleaded guilty in federal court October 6 to 
knowingly manufacturing and selling an unregistered pesticide. The companies 
allegedly manufactured its Biocop Anti-Fouling Coating product which contained 
tributyltin methacrylate (TBT) then altered its labeling to appear the product was 
manufactured before the U.S. Environmental Protection Agency cancelled its 
registration and banned its production and sale in 2005. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/895c3 
3ed7c02d6c 1 85257d690067 1 6bd IQpenDocument 

15. October 6, U.S. Department of Agriculture - (California) California firm recalls beef 
products due to possible processing flaw. The Food Safety and Inspection Service 
announced October 6 that Galant Food Company issued a recall for about 410 pounds 
of its Galina’s Original Beef and Cheese Piroshki and Paramount Beef Piroshki 
products because the meat filling used in the products did not meet its cooking critical 
limit. The products were sent to a retailer in the San Francisco Bay area and a 
distributor in northern California. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-067-20 1 4-release 
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Water and Wastewater Systems Sector 

16. October 6, South Jersey Times - (New Jersey) Bridgeton City’s water restored after 
severe water main break. A water main break left residents in the city of Bridgeton, 
New Jersey, without water for nearly 12 hours October 6 and forced city schools to 
close due to low or no water pressure until crews were able to repair the break. Classes 
were expected to resume October 7. 

Source: 

http://www.ni.com/cumberland/index.ssf/2014/10/bridgeton water main break almost 
fixed city officials say.html 

For additional stories, see items 18 and 31 
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Healthcare and Public Health Sector 



Nothing to report 
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Government Facilities Sector 

17. October 7, Lancaster Online - (Pennsylvania) Wheatland M.S. boiler fire closes 
school for second day, causes $150,000 damage. Wheatland Middle School in 
Lancaster Township remained closed October 7 after an October 6 boiler fire caused an 
estimated $150,000 in damage and prompted the evacuation of students and staff while 
fire crews aired out the building after detecting elevated carbon monoxide levels. 
Source: http://lancasteronline.com/news/local/updated-wheatland-m-s-boiler-fire- 
closes-school-for-second/article 8772f4f c-4d4f- 1 Ie4-be75-001a4bcf6878.html 

18. October 7, KABB 29 San Antonio - (Texas) Water outage shuts down Carrizo 
Springs schools. Texas officials announced that schools in the Carrizo Springs 
Consolidated Independent School District would be closed October 7 due to a citywide 
water issue. 

Source: http://www.foxsanantonio.com/news/features/top-stories/stories/water-outage- 
shuts-down-carrizo-springs-schools-7006.shtml 

19. October 6, Berkshire Eagle - (Massachusetts) MCLA reopens after evacuation due 
to bomb threat. The campus of Massachusetts College of Liberal Arts was evacuated 
for 3 hours October 6 due to a bomb threat received by North Adams Police. 

Authorities searched the campus and issued an all-clear once nothing suspicious was 
found and continue to investigate the incident. 

Source: http://www.berkshireeagle.com/news/ci 26672498/mcla-evacuated-amid- 
threats-multiple-bombs-campus 

20. October 6, Pittsburgh Post-Gazette - (Pennsylvania) Fire hasn’t disrupted 
operations at Flight 93 memorial. Authorities are investigating the cause of an 
October 3 fire at the Flight 93 National Memorial in Somerset County that burned three 
administrative buildings and the artifacts they housed. 

Source: http://www.post-gazette.com/news/state/2014/10/Q6/Officials-rule-out-arson- 

at-Flight-93-memorial-in-Somerset-County-Pittsburgh- 

Pennsvlvania/stories/20 141 0060 1 67 



For another story, see item 16 
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Emergency Services Sector 

21. October 6, KCNC 4 Denver - (Colorado) Jeffco investigating if car thefts are 
connected to escaped inmate. Authorities are searching for an inmate who escaped 
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from a jail in Jefferson County, Colorado, October 5 through a small gap in wire 
fencing during recreation. The jail closed all recreation areas of the facility for 
inspection and officials are investigating the incident. 

Source: http://denver.cbslocal.com/2014/10/06/ieffco-investigating-if-car-thefts-are- 
connected-to-escaped-inmate/ 

22. October 6, Burlington Free Press - (Vermont) Police recapture inmate who escaped 
from prison. An inmate who escaped from the Southeast State Correctional Facility in 
Windsor was recaptured 8 hours after he cut through a fence while working on an 
assignment on site October 6. The jail was placed under lockdown when personnel 
discovered the inmate was missing. 

Source: 

http://www.burhngtonfreepress.com/storv/news/local/vermont/2014/10/06/vermont- 
police-seek-escaped-inmate/168 14485/ 

23. October 6, Hunterdon County Democrat - (New Jersey) Two Hunterdon fire 
companies report theft of portable radios. Volunteer fire companies in Hunterdon, 
including Amwell Valley in Ringoes, Quakertown in Franklin Township, and a fire 
company in Hillsborough reported the theft of 23 portable radios totaling over $13,000. 
Authorities issued an advisory and police are investigating the thefts. 

Source: http://www.ni.com/hunterdon-county- 
democrat/index.ssf/2014/10/two hunterdon fire companies r.html 
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Information Technology Sector 

24. October 7, Securityweek - (International) Bugzilla vulnerability exposes undisclosed 
bugs. The developers of the Bugzilla bug-tracking software released an update to 
address several security issues, including one reported by Check Point Software 
Technologies researchers that could allow an attacker to bypass the email validation 
process and potentially receive information on undisclosed security issues. 

Source: http://www.securitvweek.com/bugzilla-vulnerabilitv-exposes-undisclosed-bugs 

25. October 7, Securityweek - (International) Yahoo! changes tune after saying servers 
were hacked by Shellshock. Yahoo reported October 6 that some servers that were 
recently compromised were not compromised using the Shellshock vulnerability but 
instead by a bug in a parsing script used on some servers. 

Source: http://www.securitvweek.com/vahoo-changes-tune-after-saying-servers-were- 
hacked-shellshock 

26. October 6, Softpedia - (International) Trojans-SMS are top threat on Android, 
INTERPOL and Kaspersky say. Kaspersky Labs and INTERPOL released the results 
of a study of mobile security threats over a 1 year period and found that Android users 
were the most targeted by attackers, with SMS trojans accounting for 57.08 percent of 
all detections, among other findings. 

Source: http://news.softpedia.com/news/SMS-Troians-Are-Top-Threat-on-Android- 



- 7 - 



INTERPOL- and-Kaspersky-Say-46 11 95 .shtml 



27. October 6, SC Magazine - (International) Bash bug payload downloads KAITEN 
DDoS malware source code. Trend Micro researchers detected a payload being 
delivered via attacks exploiting the Shellshock vulnerability that downloads the source 
code for the KAITEN distributed denial of service (DDoS) malware. 

Source: http://www.scmagazine.com/bash-bug-payload-downloads-kaiten- 
malware/article/375650/ 



For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. October 6, Threatpost - (National) AT&T hit by insider breach. AT&T notified an 
undisclosed amount of customers that a former employee may have illegally accessed 
their personal information, including Social Security numbers and driver’s license 
numbers, in August. 

Source: http://threatpost.com/att-hit-bv-insider-breach/108705 

29. October 6, Redmond Reporter - (Washington) Frontier restores all copper services 
in Redmond. Copper voice and broadband network services for Frontier 
Communications customers in Redmond were restored October 3 following a 
September 20 outage caused by copper and fiber cables that were inadvertently cut, 
which severely damaged Frontier’s network infrastructure. 

Source: http://www.redmond-reporter.com/news/278263221.html 

For another story, see item 8 
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Commercial Facilities Sector 

30. October 7, KYW 3 Philadelphia - (Pennsylvania) Nearly 100 displaced by Delco 
apartment fire. About 100 residents were evacuated and displaced from the Glencroft 
Apartment Complex in Folcroft due to elevated levels of carbon monoxide and 
concerns over structural damage following an October 6 fire. 

Source: http://philadelphia.cbslocal.com/2014/10/07/nearly-100-displaced-bv-delco- 
apartment-fire/ 
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31. October 7, WJLA 7 Washington, D.C. - (Maryland) Water main break shuts down 
part of Route 1 in Beltsville. Eight Beltsville businesses were without water October 7 
after a 16-inch water main along Route 1 ruptured due to unknown reasons. Repairs to 
the line were expected to take several hours and one lane of Route 1 was closed to 
traffic during the work. 

Source: http://www.wila.com/articles/2014/10/water-main-break-shuts-down-part-of- 
route-l-in-beltsville-107854.html 

32. October 6, Bergen County Record - (New Jersey) Hillsdale strip mall still closed, 
days after dump truck crash. Stores and restaurants at a Hillsdale strip mall were 
closed indefinitely and officials marked the building as an unsafe structure October 6 
after a dump truck crashed through pavement and into an underground garage beneath 
the strip mall October 3. No injuries were reported, and authorities cordoned off the 
entire strip mall while engineers continue to inspect the building for structural damage. 
Source: http://www.northiersev.com/news/hillsdale-strip-mall-still-closed-days-after- 
dump -truck-crash- 1.11 03697 

33. October 6, WFOR 4 Miami - (Florida) Caught on camera: Car plows into diners in 
front of Miami restaurant. Ten people were injured when a driver lost control of his 
vehicle, struck a pole, then crashed into an outdoor dining area of Lemoni Cafe and 
Lemoni Pizza in Miami October 4. 

Source: http://miami.cbslocal.com/2014/10/06/caught-on-camera-car-plows-into- 
diners-in-front-of-miami-restaurant/ 

34. October 5, KWTX 10 Waco - (Texas) Power restored to most homes, businesses in 
Waco. Utility crews restored service to all businesses and homes in Waco October 5 
following strong storms October 1 that downed trees and knocked out power to 
thousands of customers. Officials reported that the storm damaged 11 apartment 
buildings, 52 commercial and non-profit structures, and 1 church. 

Source: http://www.kwtx.com/home/headlines/Severe-Weather-Causes-Damage- 
Across-Central-Texas-277966301.html 

35. October 5, WPX1 11 Pittsburgh - (Pennsylvania) Tanker truck leaking gasoline 
prompts home, hotel evacuations in Center Twp.. Two hotels and nearby homes in 
Center Township were evacuated for several hours October 4 while crews cleaned fuel 
that leaked from a tanker truck at a Beaver County Shell gas station. Crews diverted 
some of the gas that leaked into a storage tank and transferred the remaining fuel from 
the 2,500-gallon tanker truck into a second truck. 

Source: http://www.wpxi.com/news/news/local/tanker-truck-leaking-gasoline-prompts- 
home-hotel-e/nhcL6/ 
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Dams Sector 

Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
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